Race Condition Vulnerability in CODESYS Control Runtime for Linux and QNX

CVE-2025-41739

What is CVE-2025-41739?

An unauthenticated remote attacker can exploit a vulnerability within the communication servers of the CODESYS Control runtime system on Linux and QNX platforms. By successfully navigating a specific race condition, the attacker is able to trigger an out-of-bounds read through specially crafted socket communication, potentially leading to a denial of service situation. This vulnerability emphasizes the critical need for robust security measures in industrial automation environments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References